<div dir="ltr"><div>alberto,</div><div><br></div><div>Q Is jool behaviour will be different if we add some router or linux system to reach to node B. as the scenario is explain below.</div><div> I am trying to clear below concept the theoretically first before going for any change to network.</div><div><br></div>node A ------ Jool ------node(i) ------- node B<br>1234::6 1234::1 | 1.2.3.1 172..x.x.x 104.X.X.x<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, May 19, 2020 at 9:29 PM Alberto Leiva <<a href="mailto:ydahhrk@gmail.com">ydahhrk@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">pool4 is not the addresses of the remote node.<br>
pool4 is the addresses you want jool to mask packets with.<br>
<br>
Suppose you have the following network:<br>
<br>
node A ------ Jool -------------- node B<br>
1234::6 1234::1 | 1.2.3.1 1.2.3.4<br>
<br>
And suppose Jool's pool6 is 64::/96, and its pool4 is 1.2.3.1 with<br>
ports 100-200:<br>
<br>
Node A wants to access an HTTP server in node B, so it writes the<br>
following packet:<br>
<br>
[1234::6]:4321 -> [64::1.2.3.4]:80<br>
<br>
Where 4321 was a port assigned randomly.<br>
<br>
Jool translates that into the following packet:<br>
<br>
<a href="http://1.2.3.1:150" rel="noreferrer" target="_blank">1.2.3.1:150</a> -> <a href="http://1.2.3.4:80" rel="noreferrer" target="_blank">1.2.3.4:80</a><br>
<br>
pool4 was what it used to decide the source address. It wouldn't have<br>
chosen, for example, <a href="http://1.2.3.1:1000" rel="noreferrer" target="_blank">1.2.3.1:1000</a>, because that's not in pool4. The<br>
150 was chosen randomly, but only from the range 100-200.<br>
<br>
The destination address (<a href="http://1.2.3.4:80" rel="noreferrer" target="_blank">1.2.3.4:80</a>) is computed entirely from<br>
[64::1.2.3.4]:80. pool4 has nothing to do with it.<br>
<br>
On Mon, May 18, 2020 at 8:20 PM Kunal Chauhan <<a href="mailto:atkunalchauhan@gmail.com" target="_blank">atkunalchauhan@gmail.com</a>> wrote:<br>
><br>
> alberto,<br>
><br>
> Regarding pool4 modification:<br>
><br>
> IF jool machine is able to ping to 104.x.x.x then ,Should pool4 should be modify?<br>
><br>
> as current pool4 showed entry like 172.x.x.x<br>
><br>
> pool4 may have multiple entry of different class of IP. ?<br>
><br>
><br>
><br>
> On Tue, May 19, 2020 at 12:40 AM Kunal Chauhan <<a href="mailto:atkunalchauhan@gmail.com" target="_blank">atkunalchauhan@gmail.com</a>> wrote:<br>
>><br>
>> Alberto,<br>
>><br>
>> Thanking you very much.<br>
>> I will take your advice as valuable feed back and troublshoot for the same that is my job.<br>
>><br>
>><br>
>><br>
>> On 19 May 2020 12:36 a.m., "Alberto Leiva" <<a href="mailto:ydahhrk@gmail.com" target="_blank">ydahhrk@gmail.com</a>> wrote:<br>
>><br>
>> Ok, then you'll have to fix those problems before worrying about A.<br>
>> You can't expect A to reach B through J if J itself can't reach B.<br>
>> This is probably a routing problem, and it definitely doesn't have<br>
>> anything to do with IP translation.<br>
>> I'm sorry, but it's not my job to help you troubleshoot this problem.<br>
>><br>
>> On Mon, May 18, 2020 at 1:54 PM Kunal Chauhan <<a href="mailto:atkunalchauhan@gmail.com" target="_blank">atkunalchauhan@gmail.com</a>> wrote:<br>
>> ><br>
>> > Alberto,<br>
>> ><br>
>> > Quoting below point:<br>
>> ><br>
>> > 2.1. If you ping 104.x.x.x from Jool, does it work?<br>
>> > 2.2. If you ping ::ffff:68c6:b6f7 from Jool, does it work?<br>
>> ><br>
>> > >>>2.1 jool machine is not able to ping to 104.x.x.x<br>
>> ><br>
>> > >>> 2.2 this is also not working<br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> ><br>
>> > On 19 May 2020 12:13 a.m., "Alberto Leiva" <<a href="mailto:ydahhrk@gmail.com" target="_blank">ydahhrk@gmail.com</a>> wrote:<br>
>> ><br>
>> > > 1. Node B is not under my control i know its ipv4 addres only. Like 104.x.x.x<br>
>> ><br>
>> > 1.1. Then what is the problem with "ping6 2001:ab5::104.X.X.X"?<br>
>> ><br>
>> > > 2. Node A and jool machine are in my internal network as range for ipv4 is 172.x.x.x and ipv6 is 2001:xxxx....<br>
>> ><br>
>> > 2.1. If you ping 104.x.x.x from Jool, does it work?<br>
>> > 2.2. If you ping ::ffff:68c6:b6f7 from Jool, does it work?<br>
>> ><br>
>> > On Mon, May 18, 2020 at 1:35 PM Kunal Chauhan <<a href="mailto:atkunalchauhan@gmail.com" target="_blank">atkunalchauhan@gmail.com</a>> wrote:<br>
>> > ><br>
>> > > Alberto,<br>
>> > ><br>
>> > > Actually i might have missed to explain below points for latest scenerio.<br>
>> > ><br>
>> > > 1. Node B is not under my control i know its ipv4 addres only. Like 104.x.x.x<br>
>> > ><br>
>> > > So i can not add any thing at node B side<br>
>> > ><br>
>> > > 2. Node A and jool machine are in my internal network as range for ipv4 is 172.x.x.x and ipv6 is 2001:xxxx....<br>
>> > ><br>
>> > > On 18 May 2020 11:47 p.m., "Alberto Leiva" <<a href="mailto:ydahhrk@gmail.com" target="_blank">ydahhrk@gmail.com</a>> wrote:<br>
>> > >><br>
>> > >> Ok, then enable IPv6 forwarding in Jool if you haven't already:<br>
>> > >><br>
>> > >> kunal@JOOL:~# sysctl -w net.ipv6.conf.all.forwarding=1<br>
>> > >><br>
>> > >> And make sure A and B can reach each other through Jool's machine. For example:<br>
>> > >><br>
>> > >> kunal@A:~# ip route add ::ffff:68c6:b6f7 via <Jool machine's<br>
>> > >> A-facing IPv6 address><br>
>> > >><br>
>> > >> ---<br>
>> > >><br>
>> > >> kunal@B:~# ip route add 2001:ab5:0:1::/64 via <Jool machine's<br>
>> > >> B-facing IPv6 address><br>
>> > >><br>
>> > >> Then, do the ping:<br>
>> > >><br>
>> > >> kunal@A:~# ping6 ::ffff:68c6:b6f7<br>
>> > >><br>
>> > >> Which should create the following packet flow:<br>
>> > >><br>
>> > >> 1. A sends ping request "2001:ab5:0:1::x -> ::ffff:68c6:b6f7"<br>
>> > >> 2. Jool does not translate that packet, but its Linux host instead<br>
>> > >> routes it normally towards B.<br>
>> > >> 3. B replies "::ffff:68c6:b6f7 -> 2001:ab5:0:1::x"<br>
>> > >> 4. Jool does not translate that packet, but its Linux host instead<br>
>> > >> routes it normally towards A.<br>
>> > >> 5. A receives the reply.<br>
>> ><br>
>> ><br>
>><br>
>><br>
><br>
><br>
> --<br>
> Thanks with Regards!<br>
><br>
> Kunal Chauhan<br>
> Mob:09813614826<br>
> Mob:08860397903<br>
> <a href="mailto:E-mail%3Aatkunalchauhan@gmail.com" target="_blank">E-mail:atkunalchauhan@gmail.com</a><br>
><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div><font color="#000099"><i><b>Thanks with Regards!</b></i></font></div><font color="#000099"><i><b><div><font color="#000099"><i><b><br></b></i></font></div>Kunal Chauhan</b></i></font><div><font color="#000099"><i><b>Mob:09813614826</b></i></font></div><div><font color="#000099"><i><b>Mob:08860397903</b></i></font></div><div><font color="#000099"><i><b><a href="mailto:E-mail%3Aatkunalchauhan@gmail.com" target="_blank">E-mail:atkunalchauhan@gmail.com</a></b><br></i></font><div><br></div></div></div>